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Fig. 2(a) 



01: 
02: 
03: 
04: 
05: 
06: 
07: 
08: 
09: 
10: 
11: 
12: 
13: 
14: 
15: 
16: 



int mainO 
{ 

int a[3] : 
f 00 (a) : 
return 0: 

1 



void fooCint *p) ^ 

{ 

int 1; 

for ( i = 0: 1 < 4: i-H- ) 
*p++ = 0; 



generating pointer with range: 
:i nf ormat 1 on from tlie size 
irecognized in (T) 



receiving pointer with range: 
:i nf ormat i on 



i I ega I I OOP ; 



Fig. 2(b) 
1st time loop of <S) 



<— 



!a[3]: 



address 



address value 
of a CO] 



lower limit 
value of "a" 



upper limit 
value of "a" 



: range information 



Fig. 2(c) 
3rd time loop of (§) : 



;a[3]: 



I—: address : 



address value 
of a [2] 



lower I imit 



upper limit 
value of 'V 



t 

.-I 



:P- 



: range information 



Fig. 2(d) 



4th time loop of ® 
(exception occurs at time of 
acccess) 



y \r\ya\ id areaVX 



a [3] : 



I — : address 



address value of 
a [3] 



lower I imit value 

of "^r 



upper I imit value 
of "a" 



: P : 



' — : range information 
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Fig. 3(a) 



01 


. extern void input_str (char *str) ; 


02 




03 


: int mainO 


04 


r 

I 


05 


char buf[32]: 


06 


int len = 0; 


07 




08 


i nput_str (buf ) ; 


09 




10 


while ( buf [len] != 0) 


1 1 
1 1 




12 




13: 


printf( "%dThis is a character. ¥n" , len): 


14: 




15 


return 0; 


16: 


} 




[ source code (ma i n. c) : 




Fig. 3(b) 


01: 


void input_str (char *str) 




/ 
I 


03: 


int c; 


04: 




05: 


while((c = getcharO) != EOF) 


06: 


♦str++ = c: 


07: 


} 





source 


code (i nput_int. c) 




Fig. 3(c) 


main, c: 






char[] 


UPPER 


; upper expanding 


* 


FIXED 


; fixed size 


input_str. c: 






* 


FIXED 


;fixed size 



failure recovering i nf ormat i on f i Te 
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Fig. 4(a) 





work area of calling source 


return address 


;adciress uxlUUzU : 


area of "buf" 
(32 bytes) 


iaddress "0x10000"! 





stack memory 



Fig. 4(b) 



address area (0x10000) 



address upper limit (0x10020) 



address lower limit (0x10000) 



failure recovering information (UPPER) 



pointer value 



: ■•■raniTd"": 
Ujifflrmatlort 
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Fig. 5(a) 



01: 
02: 
03: 
04: 
05: 
06: 
07: 
08: 
09: 
10: 



char a [5] ; 

extern void foo(char ♦p) ; 

int mainO 
{ 

foo(&a[1]) : 
return 0: 



source code in C language : 
Fig. 5(b) 



a [3] 






< 1 






a [2] 








address information 








a[l] 


adress upper 1 imit 


< 






a[0] 




address lower limit 


< 


variable area; 




fai lure recovering 
i nf ormat i on 



range 
information: 



pointer value 



Fig. 6 



Ivariabie-^ 
; area : 



a [3] 










a [2] 






address 








information 


a[l] 


< 






address upper 
1 imit 


a[0] 


^ 


address lower 




1 imit 


fai lure recovering 
i nf ormat i on 




: pointer value ; 



range 
i nf ormat i on ; 
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Fig. 7 




6/21 



Fig. 8 



L 



21 



source code 



22 



fai lure recovering 
information file 



compi ler 



variable 




variable area 



fai lure recovering 
information 



pointer type 



address 



range information 



fai lure recovering 
information 
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ig. 9 
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Fig. 10 



detecting 
exception signal 



acquiring fault 
location and 
fai lure recovering 
information 



: step 1 




:YES': 



mother than upper and; 
•lower expanding 



[''sfe]>"5"*: 



"step d '- 




storing "0" in 

place of reading 



; Write 



sav I ng 



• step T 



halt 
processing 



returning to next step 
of fault location 
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Fig. 11 



CO 



O 
O 

(D 
O 



O 

CO 



eg 

CM 



1^ 



0.5 — 
~ > E — 

CO g O*^ 



a> 



o 
o 




CO 



CO 

a> c: 
o 



a> CO 



CO 



CO 



o- 




co 



CO— Xf— 



CO O" 



O 



ure 


ion 












CO 












CD 




o-o 

M 




C 


O 




CD 




_C g bJO C 
CO 



<».2 



-O g (|> 
o = > 
« o g 



CO 



CO 



2- 











C 




o 












er 




bO 




AO 


•matic 


C 


<D 


o 


T3 




CD 


C 


CO 




o 








Q. 1- 


CD 


o 


(O 


CO 


lur 


C 


rre 


> 






o 








o 





a> ^ — 



CO 



> 
o 
o 

I 

CD 



CO 



I 

c 
o 



CO 

^ — 

O "O 

4- CO 

S= CD 



^ 8 



CO 




CM 
CO 



bO C= — 
I c o c 
CD rj 

4-» 

3 CD CO bX) 

— > E C 

— O » 

CO O O 

M— CD 4— O 

CO 



10/21 



Fig. 12 






.variable : 


gene rat i ng p6 i nter | 


poTriter : 


iother ; 




declaration : 


from variable : 


flRQ cation...: 




: step 2f: 


: step 22 




: step 2$ 


:step 24 



sav I ng 
variable 
address and 
variable range 



generating code, which 

generates pointer 
including variable range 
information and failure 
recovering information 



jneraiing coae. wni< 
deals with pointer 
including variable 
range and fai lure 
recovering information 



corresponding to 
grammer of 
I anguage 




searching code dealing 
with pointer whose value 

Is undecided, from 
generated code 



: step 26 




Indecided vluS 
ex i sts? 



setting saved variable 
address and cariable range 
to code that generates 
pointer 



step 28 



searching, from 
fai lure-recovering 
information file, failure 
recovering attribute of 
variable referred by code 
that generates pointer 



step 29 



setting searched failure 
recovering attribute to code 
that generates pointer 



f — " 

end ~^ 



step 30 
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Fig. 13 



detect i ng 
exception signal 



acquiring fult 
location and fai lure 
recovering information 



: step 1 




i step 2 



lipper 

iexpanding : 



jlower 
JBxpanding 

: step 4 



other than 
jupper and lower: 
expand i ng 



reading out 
different area 




storing "0" in place 
of reading 



:YES: 



: NO : 




step "35 


al loc 
d iff ere 


at 
nt 


ing 
area 





storing in 
different area 



: step '36 



returning to next 
step of fauly 
location 



; step 10 
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Fig. 14 
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Fig. 15 



:sfep 'iftj 




" VarlabTe'- 
declaration: 



saving variable 

address and 
variable range 



: step '42; 



generating pointer: 
from variable 



• Step "43 



generating code, 
which generates 
pointer including 
variable range 
information 



a! locating area to 
store fai lure 
recovering information 

in area that is 
adjacent to variable 



I 



pointer 
operation 



istep 44; 



generating code, 
which deals with 
pointer including 
variable range 



[step "45"; 



generating code 
corresponding tc 
gramme r of 
language 




: step '46' 
end of source? 



searching variable address and range 
information area, which is saved in pointer 
generating code 



step 47 



searching failure recovering information 

area whose value is undecided, from 
generating code 



step 48 



; step 49 




I NO: 



:YES: 



;step 50: 



searching failure recovering attribute 
corresponding to variable from failure 
recovering information fi le 



setting searched failure 
recovering attribute to 
code 

d^ZD 



1 step 51 
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Fig. 16 



detect i ng 
exception signal 



acquiring fault 
location and 
fai lure recovering 
information 



: step 1 




other than upper and: 
lower expanding 



upper 
.expanding.: 

:' step 52 



recovering processing 
of upper expanding 
attribute 



lower \ 
expanding : 

: step 53 ; 



recovering processing 
of lower expanding 
attribute 




step 55 



searching data 
area 



step 56 




:YES: 



: step 57 



setting "0" at the 
end of data 




returning to next step 
of fault location 



Step 10 
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Fig. 17 
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Fig. 18 



C 



start 



1 


r 


reading out fai lure 
recovering information fi le 



Step "70 



step 71 : 



•step" 72 



variable 



^---.-..^.^dec 1 a r at 1 on?^^^ j^-Q ^ 

^^""TitSi 

j* - - - • : step 73 : 


searching from failure recovering 
information file corresponding to variable 




adding modifier of failure recovering 
information in variable declaration 


: step 74 : 






M 

r 


outputting intermediate code to file 


:step 75; 




vaV fable 
: declaration 



i step 79 ' 



saving variable 
address, 

variable range 
and fai lure 
recovering 
information 



generating pointer- 
from variable : 



step '80": 



generating code, which 
generates pointer 
including variable 
range information and 
fai lure recovering 
information 
I 



pd inter" 
: operation. 



:'step'8V; step 82" 



generating code, which 
deals with pointer 
including variable 
range and fai lure 

recovering information 



; other: 



generating 
code 
corresponding 
to grammar of 
language 
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Fig. 19(a) 


01 


. extern void jnput_str (char *str) ; 




02 






03 


int mainO 




04 


• I 




05 


UPPER char buf[32]; 




06 


FIXED int len=0: 




07 






08 


i nput_str (buf ) : 




09 






10: 


while ( buf [len] ! = 0) 




11 


len++: 




12 






13. 


printf( "%dThis is a character¥n" , 




len) ; 




14. 






15: 


return 0; 




16: 


1 










: . . . . isf-tsr. .pfPA^ss jng .of. 7mio, a) 




Fig. 19(b) 


01: 


void input str(char *str) ; 


02: 


{ 


03: 


FIXED int c: 


04: 


05: 


while ( (c = getcharO) ! = EOF) 


06: 


*str++=c; 


07: 


} 


\ i ntermed i ate code ( i nput_ i nt. c) • 
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Fig. 20 
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I/O device 
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1. 
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63 
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display 
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62 
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1. 



61 
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Fig. 21 
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input 
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unit 



1. 
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searching 
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1. 
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Fig. 22(a) 
extern void read_str (char *str) ; 

int read_int() 
{ 

char buf[32]; 
read_str (buf ) ; 
return atoi (buf) ; 



j source code : 



Fig. 22(b) 



work area of 
cal I ing source 



return address 



area of "buf 
(32 bytes) 



stack memory 



Fig- 22(c) 



attack code 



address of attack 
code 



dummy 
32 bytes 



data for attack 
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